Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
File:                     410c2aa7-bb4f-3e49-bacb-d414b9074359.roa (raw, json)
Hash identifier:          bnafwqArRwjqNej50C9nfgOP5wPGNycxNEuatczNbN4=
Subject key identifier:   DC:6E:CA:BB:08:50:C5:B0:A5:00:41:49:D4:05:6D:D8:F4:F8:D0:B2
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285849849EF523AA9D5C2B135884C0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     10737
IP address blocks:        172.96.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f5:23:aa:9d:5c:2b:13:58:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=87169f30-c8b1-4e98-a445-35ab7a838d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:68:2c:8c:35:ed:bd:83:7e:f8:fb:00:cd:
                    08:14:a8:ff:77:76:67:72:5b:f4:63:b2:62:0d:7e:
                    84:5f:9a:7d:2b:b8:18:01:6b:87:74:9d:6b:e1:f6:
                    f9:15:e9:7e:69:53:e5:8b:6c:f4:a9:86:71:00:ef:
                    87:5c:63:36:a2:9d:22:5d:7a:b1:88:93:6f:4c:aa:
                    67:ef:03:ff:95:48:4d:75:d6:39:2b:49:6e:a0:b2:
                    42:98:ac:15:5a:34:b3:9d:21:4b:4b:39:35:42:19:
                    d9:b6:91:40:04:44:73:78:6c:57:ce:95:95:f1:07:
                    ab:a1:12:74:0d:62:28:cf:e6:05:6a:f1:eb:f5:a3:
                    dd:64:b5:56:17:0d:1e:93:17:db:eb:7f:b0:d8:a4:
                    3b:a1:d2:d0:27:3c:0c:0c:fb:47:51:5e:b7:34:c0:
                    1b:6e:04:6d:aa:fc:9c:b7:6a:8b:02:13:58:6e:b2:
                    6f:8e:c9:ad:f7:85:6c:ae:9d:b4:2e:94:f3:c9:96:
                    a6:aa:d3:7d:3c:35:3e:17:8f:34:a2:9f:f1:49:e7:
                    f7:0d:19:b2:21:a9:97:54:8e:32:76:0e:75:6f:3c:
                    2a:8d:fa:5a:74:14:33:66:b8:7c:d8:ec:1f:34:26:
                    5b:23:78:b3:d1:c0:00:1d:1d:3c:06:34:c3:55:6c:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:CA:BB:08:50:C5:B0:A5:00:41:49:D4:05:6D:D8:F4:F8:D0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:03:3f:89:03:b1:e4:d1:f5:5f:b2:c5:35:32:7f:51:28:
         b9:40:ca:53:65:98:34:04:8b:1f:7a:f6:f1:35:15:8d:4f:ea:
         bb:e8:22:b6:9d:16:0c:a6:28:41:77:93:4c:2e:7f:87:43:55:
         0b:4f:d4:8f:d5:99:9f:1e:14:a1:90:8c:2c:b8:ec:23:04:2b:
         05:49:ac:c6:e6:66:c2:d2:22:51:44:db:95:f5:4e:a1:65:33:
         49:1e:82:46:c3:fd:b0:d2:05:4b:75:82:dd:6f:35:83:f9:b0:
         d1:21:c4:28:b8:6f:43:a2:ab:d6:fa:d8:a0:49:ed:69:99:6d:
         c3:a9:7a:85:5e:bb:46:6d:e0:6a:26:57:23:43:17:d0:97:d3:
         91:48:f8:08:66:56:e0:8d:d7:ad:a2:c9:50:45:d3:33:4a:a1:
         c1:01:09:5c:a2:ef:d9:70:61:6f:76:22:de:82:50:1e:bf:3b:
         f3:4b:19:7e:37:64:d3:58:a0:6e:2f:f2:e7:fc:9b:db:30:81:
         16:f1:93:c6:ed:3b:a3:1e:16:98:9c:91:7d:a4:f1:75:a5:72:
         f1:4e:b7:f9:1a:46:28:d1:4e:dd:6c:12:93:c9:4a:0d:70:0c:
         87:2a:f3:14:80:f3:90:8e:d8:83:09:03:ee:da:13:d1:6c:47:
         05:81:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:18:16 2025 by rpki-client